<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://oversightinstitute.org/</loc><lastmod>2026-09-27T13:07:24.522Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary</loc><lastmod>2026-09-04T23:10:30.344Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/ai-bill-of-materials</loc><lastmod>2026-08-30T02:27:07.629Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/access-controls</loc><lastmod>2026-08-30T02:37:43.802Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/access-revocation</loc><lastmod>2026-08-29T23:06:42.806Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/access-and-audit-rights</loc><lastmod>2026-08-29T23:22:11.750Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/alerting</loc><lastmod>2026-08-29T21:44:00.059Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/article-28-requirements</loc><lastmod>2026-08-30T02:08:18.927Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/article-30-requirements</loc><lastmod>2026-08-30T14:19:16.963Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/audit-rights</loc><lastmod>2026-08-29T21:59:35.909Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/bonded-labour</loc><lastmod>2026-08-29T23:42:07.353Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/breach-notification-clause</loc><lastmod>2026-08-30T01:17:12.079Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/business-associate</loc><lastmod>2026-08-29T23:59:40.413Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/csrd-reporting</loc><lastmod>2026-08-29T22:26:11.520Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/centralized-risk-management</loc><lastmod>2026-08-30T01:08:05.858Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/chapter-v-dora</loc><lastmod>2026-08-30T02:06:36.819Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/child-labour</loc><lastmod>2026-08-30T14:29:54.568Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/circular-procurement</loc><lastmod>2026-08-30T01:13:42.378Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/compliance-risk</loc><lastmod>2026-08-30T00:12:51.755Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/component-provenance</loc><lastmod>2026-08-30T13:56:35.501Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/computer-security-incident-handling</loc><lastmod>2026-08-30T14:03:17.016Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/concentration-risk-assessment</loc><lastmod>2026-08-29T21:48:36.195Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/confidentiality-clause</loc><lastmod>2026-08-30T01:18:40.628Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/continuity-of-service</loc><lastmod>2026-08-30T03:08:57.731Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/continuous-assessment</loc><lastmod>2026-08-29T22:32:04.046Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/continuous-monitoring-of-active-arrangements</loc><lastmod>2026-08-29T23:24:28.880Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/contract-negotiation</loc><lastmod>2026-08-29T21:55:24.848Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/contract-termination-rights</loc><lastmod>2026-08-30T01:39:10.120Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/coordinated-disclosure</loc><lastmod>2026-08-30T14:44:42.309Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/coordinated-incident-response</loc><lastmod>2026-08-30T02:58:28.085Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/corporate-social-responsibility</loc><lastmod>2026-08-30T00:22:00.255Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/counterfeit-insertion</loc><lastmod>2026-08-30T02:32:38.563Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/credit-risk</loc><lastmod>2026-08-30T00:16:23.280Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/critical-activities</loc><lastmod>2026-09-04T23:05:06.684Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/critical-ict-third-party-provider</loc><lastmod>2026-08-30T01:55:15.969Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/critical-or-important-functions</loc><lastmod>2026-08-29T23:58:13.469Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/criticality-analysis-process-model</loc><lastmod>2026-08-30T02:14:49.033Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/criticality-classification</loc><lastmod>2026-08-29T21:37:25.263Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/criticality-level-classification</loc><lastmod>2026-08-30T14:28:32.432Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/cyber-risk-rating</loc><lastmod>2026-08-29T21:31:02.373Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/cyber-supply-chain-risk-management</loc><lastmod>2026-08-29T23:55:48.026Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/dora-oversight-framework</loc><lastmod>2026-08-30T01:53:29.253Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/data-confidentiality</loc><lastmod>2026-08-29T23:34:18.773Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/data-flow-mapping</loc><lastmod>2026-08-30T00:25:05.888Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/data-integrity-risk</loc><lastmod>2026-08-29T22:44:44.835Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/data-location-clause</loc><lastmod>2026-08-30T01:23:26.650Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/data-portability</loc><lastmod>2026-08-30T01:43:28.655Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/data-processing-activities</loc><lastmod>2026-08-29T23:30:39.663Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/data-protection-clause</loc><lastmod>2026-08-30T14:15:34.949Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/data-return-and-deletion</loc><lastmod>2026-08-29T23:35:56.039Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/data-return-and-destruction</loc><lastmod>2026-08-30T01:37:37.056Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/digital-operational-resilience</loc><lastmod>2026-08-30T03:10:42.500Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/disaster-recovery</loc><lastmod>2026-08-30T13:59:51.801Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/downstream-dependency</loc><lastmod>2026-08-30T00:33:46.352Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/due-diligence</loc><lastmod>2026-08-28T16:21:11.118Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/eba-guidelines-on-sound-management-of-third-party-risk</loc><lastmod>2026-08-29T22:21:35.617Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/eba-guidelines-on-third-party-risk</loc><lastmod>2026-08-30T02:10:07.455Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/eba-outsourcing-guidelines</loc><lastmod>2026-08-29T22:19:24.381Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/ethical-procurement</loc><lastmod>2026-08-29T23:37:33.778Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/exit-clause</loc><lastmod>2026-08-29T22:04:45.279Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/exit-management</loc><lastmod>2026-08-29T21:53:50.267Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/exit-plan</loc><lastmod>2026-08-30T01:35:59.889Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/exit-strategy</loc><lastmod>2026-08-30T01:34:23.545Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/extended-enterprise</loc><lastmod>2026-08-30T00:01:06.940Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/financial-condition-review</loc><lastmod>2026-08-29T22:47:35.153Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/financial-risk</loc><lastmod>2026-08-30T00:10:12.230Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/financial-viability</loc><lastmod>2026-08-29T22:46:12.469Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/financial-viability-review</loc><lastmod>2026-08-30T00:46:59.741Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/forced-labour</loc><lastmod>2026-08-30T14:17:24.707Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/fourth-and-nth-party-management</loc><lastmod>2026-08-29T23:27:43.011Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/fourth-party-disclosure</loc><lastmod>2026-08-30T00:23:34.174Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/fourth-party-visibility</loc><lastmod>2026-08-30T00:26:53.775Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/gap-analysis</loc><lastmod>2026-08-30T00:54:42.663Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/going-concern-assessment</loc><lastmod>2026-08-29T22:49:15.673Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/hardware-bill-of-materials</loc><lastmod>2026-08-30T02:25:29.354Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/hardware-supply-chain-risk</loc><lastmod>2026-08-30T02:30:44.135Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/health-insurance-portability-and-accountability-act</loc><lastmod>2026-08-30T01:48:30.413Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/ict-concentration-risk</loc><lastmod>2026-08-30T14:31:45.913Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/iso-27036</loc><lastmod>2026-08-29T22:23:02.474Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/iso-28000</loc><lastmod>2026-08-30T01:45:11.852Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/implementing-technical-standards</loc><lastmod>2026-08-30T02:02:58.119Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/incident-containment</loc><lastmod>2026-08-30T14:05:02.779Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/incident-escalation</loc><lastmod>2026-08-29T23:00:12.228Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/incident-impact-assessment</loc><lastmod>2026-08-30T03:02:08.216Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/incident-reporting</loc><lastmod>2026-08-29T22:55:27.042Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/insolvency-risk-assessment</loc><lastmod>2026-08-29T23:17:37.029Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/insurance-requirements</loc><lastmod>2026-08-30T01:25:07.094Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/interagency-guidance-on-third-party-relationships</loc><lastmod>2026-08-29T22:10:18.738Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/interdependency-analysis</loc><lastmod>2026-08-30T00:35:25.836Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/intragroup-arrangement</loc><lastmod>2026-08-30T14:12:05.941Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/joint-rts-on-subcontracting</loc><lastmod>2026-08-30T02:04:45.954Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/key-performance-indicator</loc><lastmod>2026-08-30T14:47:34.811Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/lead-overseer</loc><lastmod>2026-08-30T01:56:56.616Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/liability-and-indemnification</loc><lastmod>2026-08-29T22:06:31.099Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/lifecycle-of-third-party-arrangements</loc><lastmod>2026-08-30T00:18:51.701Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/likelihood-assessment</loc><lastmod>2026-08-30T00:53:07.423Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/major-ict-related-incident</loc><lastmod>2026-08-29T22:58:49.512Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/major-incident-classification</loc><lastmod>2026-08-30T03:00:15.388Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/malicious-code-insertion</loc><lastmod>2026-08-30T02:36:10.401Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/mandatory-contractual-provisions</loc><lastmod>2026-08-30T01:20:26.989Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/materiality-threshold</loc><lastmod>2026-08-30T01:15:09.869Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/modern-slavery-statement</loc><lastmod>2026-08-30T14:13:59.822Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/multi-tiered-risk-management</loc><lastmod>2026-08-30T00:06:32.062Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/multi-vendor-strategy</loc><lastmod>2026-08-29T23:20:36.392Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/nistir-8276</loc><lastmod>2026-08-30T02:13:13.940Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/nydfs-23-nycrr-500</loc><lastmod>2026-08-30T01:46:53.084Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/national-competent-authority</loc><lastmod>2026-08-30T02:11:39.823Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/nested-inventory</loc><lastmod>2026-08-30T02:22:07.528Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/notification-timeline</loc><lastmod>2026-08-29T23:05:20.512Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/occ-bulletin-2013-29</loc><lastmod>2026-09-04T23:07:09.441Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/offboarding</loc><lastmod>2026-08-30T01:32:54.787Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/operational-risk</loc><lastmod>2026-08-30T00:08:46.617Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/outsourcing</loc><lastmod>2026-08-30T14:33:24.197Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/performance-metrics</loc><lastmod>2026-08-30T14:43:03.990Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/performance-monitoring</loc><lastmod>2026-08-30T13:48:20.476Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/performance-scorecard</loc><lastmod>2026-08-29T21:21:48.900Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/policies-standards-and-procedures</loc><lastmod>2026-08-30T00:59:29.335Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/pre-contractual-assessment</loc><lastmod>2026-08-28T16:17:27.918Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/pre-outsourcing-risk-evaluation</loc><lastmod>2026-08-30T00:57:59.710Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/product-integrity</loc><lastmod>2026-08-30T02:50:09.943Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/program-maturity</loc><lastmod>2026-08-30T01:04:50.670Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/provider-concentration</loc><lastmod>2026-08-29T22:52:34.259Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/provider-concentration-risk</loc><lastmod>2026-08-29T23:29:10.566Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/real-time-monitoring</loc><lastmod>2026-08-29T22:33:27.061Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/redundancy</loc><lastmod>2026-09-04T23:08:49.757Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/regulatory-notification-clause</loc><lastmod>2026-08-30T01:26:39.879Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/regulatory-technical-standards</loc><lastmod>2026-08-30T02:00:20.639Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/relationship-owner</loc><lastmod>2026-08-30T01:01:00.477Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/remediation-tracking</loc><lastmod>2026-08-30T02:55:43.412Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/reporting-and-escalation</loc><lastmod>2026-08-30T01:06:49.603Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/reputational-risk</loc><lastmod>2026-08-30T00:11:36.577Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/reputational-screening</loc><lastmod>2026-08-30T00:50:10.718Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/responsible-procurement</loc><lastmod>2026-08-29T23:38:58.404Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/right-to-audit</loc><lastmod>2026-08-29T22:01:18.244Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/right-to-terminate</loc><lastmod>2026-08-30T01:21:47.897Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/risk-categorization</loc><lastmod>2026-08-29T23:43:35.598Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/risk-governance-framework</loc><lastmod>2026-08-29T23:14:17.999Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/risk-rating</loc><lastmod>2026-08-29T21:32:38.760Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/risk-scoring</loc><lastmod>2026-08-29T21:26:30.718Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/risk-vector</loc><lastmod>2026-08-29T21:29:33.676Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/risk-tiered-monitoring</loc><lastmod>2026-08-29T23:26:04.566Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sbom-minimum-elements</loc><lastmod>2026-08-30T13:54:50.212Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sec-cyber-disclosure-rules</loc><lastmod>2026-08-30T01:50:06.607Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sig-core</loc><lastmod>2026-08-28T16:25:52.881Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sla-monitoring</loc><lastmod>2026-08-29T21:24:59.032Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/soc-2-report</loc><lastmod>2026-08-30T00:45:14.360Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sr-23-4-interagency-guidance-on-third-party-relationships-risk-management</loc><lastmod>2026-08-29T22:17:25.183Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sr-control-family</loc><lastmod>2026-09-04T23:10:30.344Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/safe-and-sound-operation</loc><lastmod>2026-08-30T01:58:36.858Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/section-54-reporting</loc><lastmod>2026-08-30T02:16:35.351Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/secure-development-practices</loc><lastmod>2026-08-30T02:52:38.674Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/secure-by-design</loc><lastmod>2026-08-29T22:24:38.995Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/security-controls</loc><lastmod>2026-08-30T02:39:25.153Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/security-questionnaire</loc><lastmod>2026-08-30T00:43:24.590Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/security-rating</loc><lastmod>2026-08-30T13:45:11.385Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/security-rating-scale</loc><lastmod>2026-08-30T14:22:30.543Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/senior-management-oversight</loc><lastmod>2026-08-29T23:12:40.150Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/service-credits</loc><lastmod>2026-08-29T21:45:34.734Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/service-delivery-management</loc><lastmod>2026-08-30T14:20:54.229Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/single-provider-dependency</loc><lastmod>2026-08-29T21:47:03.536Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/slavery-and-human-trafficking-statement</loc><lastmod>2026-08-30T02:20:19.501Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/software-component-transparency</loc><lastmod>2026-08-30T02:23:43.466Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/software-supply-chain-attack</loc><lastmod>2026-08-30T02:28:54.155Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/software-supply-chain-security</loc><lastmod>2026-08-30T02:48:33.954Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/standardized-control-assessment</loc><lastmod>2026-08-30T00:51:50.016Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/strategic-risk</loc><lastmod>2026-08-30T00:15:05.630Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sub-outsourcing</loc><lastmod>2026-08-30T00:28:42.598Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sub-outsourcing-chain</loc><lastmod>2026-08-29T22:38:48.135Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sub-outsourcing-clause</loc><lastmod>2026-08-29T22:03:18.685Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sub-outsourcing-provisions</loc><lastmod>2026-08-30T14:08:34.025Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sub-processor-disclosure</loc><lastmod>2026-08-29T23:32:41.994Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sub-tier-provider</loc><lastmod>2026-08-30T00:40:16.158Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sub-tier-supplier</loc><lastmod>2026-08-30T00:30:16.937Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sub-tier-supplier-mapping</loc><lastmod>2026-09-04T23:00:17.573Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/subcontracting-chain</loc><lastmod>2026-08-29T22:43:14.540Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/subcontracting-chain-risk</loc><lastmod>2026-08-30T00:41:59.391Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/subcontracting-of-ict-services</loc><lastmod>2026-08-30T00:37:10.525Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/substitutability</loc><lastmod>2026-08-29T23:08:25.169Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/substitutability-assessment</loc><lastmod>2026-08-29T23:16:01.936Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/substitutability-at-exit</loc><lastmod>2026-08-29T23:50:06.922Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/supplier-compliance-audit</loc><lastmod>2026-08-30T14:37:08.899Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/supplier-criticality-level</loc><lastmod>2026-08-29T23:19:12.219Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/supplier-incident-planning</loc><lastmod>2026-08-30T14:07:00.509Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/supplier-relationship-management</loc><lastmod>2026-08-30T01:11:45.506Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/supply-chain-dependency</loc><lastmod>2026-08-30T00:32:27.884Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/supply-chain-dependency-mapping</loc><lastmod>2026-08-30T00:38:26.958Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/supply-chain-detection-and-response</loc><lastmod>2026-08-30T02:41:12.882Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/supply-chain-illumination</loc><lastmod>2026-08-28T16:19:16.693Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/supply-chain-resilience</loc><lastmod>2026-08-30T13:58:25.378Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/supply-chain-visibility</loc><lastmod>2026-08-30T13:46:35.960Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/sustainable-procurement</loc><lastmod>2026-08-29T23:40:22.228Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/tprm-program</loc><lastmod>2026-08-30T01:02:54.999Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/tampering</loc><lastmod>2026-08-30T02:34:25.254Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/termination</loc><lastmod>2026-08-30T01:29:38.050Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/termination-rights</loc><lastmod>2026-08-29T21:34:11.639Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/tested-exit-strategy</loc><lastmod>2026-08-29T23:10:15.705Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/third-party-arrangement</loc><lastmod>2026-08-30T14:41:40.387Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/third-party-relationship</loc><lastmod>2026-08-30T14:40:11.531Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/third-party-risk-rating</loc><lastmod>2026-08-30T14:10:18.692Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/threat-intelligence-integration</loc><lastmod>2026-08-29T22:34:58.337Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/threat-notification</loc><lastmod>2026-08-30T14:35:20.968Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/transitive-dependency</loc><lastmod>2026-08-30T13:52:33.391Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/uk-modern-slavery-act</loc><lastmod>2026-08-30T02:18:05.114Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/vendor-breach-management</loc><lastmod>2026-08-29T23:02:11.552Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/vendor-ecosystem-mapping</loc><lastmod>2026-08-29T22:40:19.352Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/vendor-intake</loc><lastmod>2026-08-28T16:29:36.012Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/vendor-inventory</loc><lastmod>2026-08-29T21:27:57.188Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/vendor-performance-review</loc><lastmod>2026-08-29T21:23:34.980Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/vendor-risk-management-lifecycle</loc><lastmod>2026-08-30T00:20:25.299Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/vendor-risk-management-maturity-model</loc><lastmod>2026-08-29T21:38:53.806Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/vendor-risk-management-office</loc><lastmod>2026-08-30T01:09:56.843Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/vendor-risk-tiering-and-classification</loc><lastmod>2026-08-30T14:46:14.123Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/vendor-selection</loc><lastmod>2026-08-28T16:27:28.131Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/vendor-termination-or-exit-procedures</loc><lastmod>2026-08-29T23:45:11.674Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/wind-down</loc><lastmod>2026-08-30T01:40:25.587Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/glossary/wind-down-plan</loc><lastmod>2026-08-29T23:48:33.203Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog</loc><lastmod>2026-09-27T13:07:24.522Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/re-enabled-actions-still-malicious-5-ci-cd-myths</loc><lastmod>2026-09-27T13:07:24.522Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/vendor-breach-your-fine-5-costly-tprm-mistakes</loc><lastmod>2026-09-26T13:07:39.938Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/saas-app-key-breach-checklist-12-controls-to-audit</loc><lastmod>2026-09-25T13:07:42.222Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/open-source-breach-response-template</loc><lastmod>2026-09-24T13:09:36.197Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/can-your-soc-prove-it-saw-the-attack</loc><lastmod>2026-09-23T13:07:52.808Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/blockchain-c2-in-npm-what-your-team-needs-to-know</loc><lastmod>2026-09-22T13:07:24.885Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/should-runtime-analysis-replace-install-time-scanning</loc><lastmod>2026-09-21T13:07:40.358Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/jaguar-land-rover-a-1-9b-lesson-in-supply-chain-triage</loc><lastmod>2026-09-20T13:09:26.323Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/api-keys-exposed-for-weeks-5-mistakes-that-let-supply-chain-attacks-succeed</loc><lastmod>2026-09-19T13:11:47.301Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/hardcoded-keys-are-safe-in-private-repos-5-api-security-myths-that-brevo-s-breach-just-disproved</loc><lastmod>2026-09-18T13:09:36.405Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/should-you-verify-carrier-identity-before-or-after-load-assignment</loc><lastmod>2026-09-17T13:07:28.123Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/visibility-without-execution-why-most-supply-chains-stall-at-the-decision-point</loc><lastmod>2026-09-16T13:07:38.073Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/data-overload-audit-your-supply-chain-clarity-checklist</loc><lastmod>2026-09-15T13:07:56.017Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/should-you-monitor-vendors-for-rootkit-indicators</loc><lastmod>2026-09-14T13:08:24.330Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/ai-agents-broke-rubygems-your-field-guide</loc><lastmod>2026-09-13T13:07:35.522Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/24-hour-cra-notification-a-working-template</loc><lastmod>2026-09-12T13:07:31.293Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/cra-reporting-in-15-months-what-a-95-item-extortion-taught-me</loc><lastmod>2026-09-11T13:07:25.015Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/vendor-credentials-api-access-3-5m-records</loc><lastmod>2026-09-10T13:07:42.376Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/ai-code-assistants-cut-review-time-they-re-also-cutting-review-depth</loc><lastmod>2026-09-09T13:07:36.477Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/81-000-records-what-shipmonk-s-deletion-failure-reveals</loc><lastmod>2026-09-08T13:11:54.267Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/id-vendors-fail-5-oversight-gaps-that-let-153m-records-walk-out</loc><lastmod>2026-09-05T13:07:50.685Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/patch-or-revoke-first-your-post-exploit-decision-tree</loc><lastmod>2026-09-03T13:13:47.796Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/block-powers-in-uk-critical-infrastructure-a-field-guide</loc><lastmod>2026-09-03T13:09:51.791Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/artifactory-breach-when-default-config-becomes-admin-access</loc><lastmod>2026-09-03T13:07:40.173Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/routers-are-now-espionage-platforms-a-hardening-playbook</loc><lastmod>2026-09-02T13:11:38.934Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/can-the-feds-call-anyone-a-supply-chain-risk</loc><lastmod>2026-09-01T11:44:03.088Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/supply-chain-risk-designation-a-compliance-checklist</loc><lastmod>2026-08-31T18:57:27.053Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/extensions-aren-t-static-five-tprm-myths</loc><lastmod>2026-08-31T18:53:30.959Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/two-arrests-3-800-repos-what-teampcp-reveals-about-supply-chain-attack-economics</loc><lastmod>2026-08-31T09:00:03.925Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/third-party-app-security-post-breach-12-controls</loc><lastmod>2026-08-31T09:00:03.921Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/should-you-pin-every-ci-cd-dependency-to-a-sha</loc><lastmod>2026-08-31T09:00:03.918Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/open-source-dependency-intake-six-mistakes-that-let-risk-through</loc><lastmod>2026-08-31T09:00:03.912Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/etsi-s-draft-standards-fail-before-enforcement</loc><lastmod>2026-08-31T09:00:03.909Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/audit-ready-compliance-your-ccm-implementation-checklist</loc><lastmod>2026-08-31T09:00:03.907Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/should-you-buy-real-time-trackers-for-every-load</loc><lastmod>2026-08-31T09:00:03.904Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/should-you-audit-vendor-file-transfer-configs</loc><lastmod>2026-08-31T09:00:03.902Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/seven-of-10-exploited-flaws-are-two-decades-old</loc><lastmod>2026-08-31T09:00:03.899Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/key-based-signing-failed-at-scale-what-sigstore-s-architecture-reveals</loc><lastmod>2026-08-31T09:00:03.897Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/post-breach-forensics-your-github-checklist</loc><lastmod>2026-08-31T09:00:03.894Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/reproducible-builds-as-a-supply-chain-control</loc><lastmod>2026-08-31T09:00:03.892Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/can-my-build-pipeline-be-hijacked-rust-attack-faq</loc><lastmod>2026-08-31T09:00:03.888Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/risk-assessments-decay-a-refresh-cadence-field-guide</loc><lastmod>2026-08-31T09:00:03.870Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/hardware-backdoors-a-pre-contract-checklist</loc><lastmod>2026-08-31T09:00:03.866Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/8-execution-points-between-pip-install-and-production</loc><lastmod>2026-08-31T09:00:03.863Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/5-ci-cd-mistakes-that-let-supply-chain-attacks-in</loc><lastmod>2026-08-31T09:00:03.859Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/build-script-audit-template-for-rust-dependencies</loc><lastmod>2026-08-31T09:00:03.857Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/logistics-breach-myths-that-put-your-supply-chain-at-risk</loc><lastmod>2026-08-31T09:00:03.852Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/patching-won-t-save-you-from-supply-chain-ransomware</loc><lastmod>2026-08-31T09:00:03.850Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/pin-your-python-dependencies-with-hashes-a-ci-template</loc><lastmod>2026-08-31T09:00:03.839Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/should-you-pin-github-actions-to-shas</loc><lastmod>2026-08-31T09:00:03.670Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/should-we-wait-48-hours-before-installing-new-packages</loc><lastmod>2026-08-31T09:00:03.650Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/staged-publishing-for-npm-a-manual-defense-layer</loc><lastmod>2026-08-31T09:00:03.637Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/config-files-execute-code-your-tprm-intake-doesn-t-check-them</loc><lastmod>2026-08-31T09:00:03.609Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/ai-agents-as-third-party-risk-a-field-guide</loc><lastmod>2026-08-31T09:00:03.509Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/14-million-records-nine-days-to-close-verizon-s-vendor-breach</loc><lastmod>2026-08-31T09:00:03.426Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/dod-halts-cmmc-phase-ii-your-60-day-action-plan</loc><lastmod>2026-08-31T09:00:03.385Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/blog/shadow-ai-just-tripled-your-vendor-count</loc><lastmod>2026-08-31T09:00:03.346Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors</loc><lastmod>2026-09-14T04:08:46.044Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/everstream-analytics</loc><lastmod>2026-08-27T21:56:30.063Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/responsehub</loc><lastmod>2026-08-27T21:58:20.726Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/deep-safe</loc><lastmod>2026-08-27T21:57:01.134Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/robobai</loc><lastmod>2026-08-27T21:58:59.792Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/vendict</loc><lastmod>2026-08-27T21:58:29.601Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/beyondfs</loc><lastmod>2026-08-27T21:56:45.154Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/isec</loc><lastmod>2026-08-27T21:57:26.318Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/securosis</loc><lastmod>2026-08-27T21:57:51.705Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/board-of-cyber</loc><lastmod>2026-08-27T21:56:16.246Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/continuuiti</loc><lastmod>2026-09-14T04:08:46.044Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/anozr-way</loc><lastmod>2026-08-27T21:56:37.451Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/vi-n-o-t-o-fmit</loc><lastmod>2026-08-27T21:58:44.590Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/trustnet-inc-formerly-itrust</loc><lastmod>2026-08-27T21:58:50.609Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/conveyor</loc><lastmod>2026-08-27T21:58:15.218Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/azanzi</loc><lastmod>2026-08-27T21:56:42.516Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/billy</loc><lastmod>2026-08-27T21:58:34.453Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/whoisxml-api</loc><lastmod>2026-08-27T21:58:09.284Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sumsub</loc><lastmod>2026-08-27T21:57:59.808Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/apogee-global-rms</loc><lastmod>2026-08-27T21:56:38.582Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/risknet-advisory</loc><lastmod>2026-08-27T21:56:25.060Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/conetrix</loc><lastmod>2026-08-27T21:56:52.617Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/dorapp-eu</loc><lastmod>2026-08-27T21:57:03.026Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/descartes-mycarrierportal</loc><lastmod>2026-08-27T21:58:53.775Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/owlin</loc><lastmod>2026-08-27T21:58:55.481Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/gatekeeper</loc><lastmod>2026-08-27T21:58:46.401Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/certa-ai</loc><lastmod>2026-08-27T21:58:38.078Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/upguard</loc><lastmod>2026-08-27T21:59:04.746Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/ombud</loc><lastmod>2026-08-27T21:58:17.684Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/values-associates</loc><lastmod>2026-08-27T21:58:06.544Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/full-armor-corporation</loc><lastmod>2026-08-27T21:56:20.940Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/information-shield-security</loc><lastmod>2026-08-27T21:57:24.310Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/kodiak-hub</loc><lastmod>2026-08-27T21:58:51.363Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/quilt</loc><lastmod>2026-08-27T21:58:20.148Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/beaconer</loc><lastmod>2026-08-27T21:58:33.622Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/compliance-solutions</loc><lastmod>2026-08-27T21:56:51.909Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/aster-docs</loc><lastmod>2026-08-27T21:58:32.416Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/riskrecon-by-mastercard</loc><lastmod>2026-08-27T21:57:47.415Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/apexanalytix</loc><lastmod>2026-08-27T21:56:38.046Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/datalock-consulting-group</loc><lastmod>2026-08-27T21:56:59.928Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/flashpoint</loc><lastmod>2026-08-27T21:56:19.726Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/censinet</loc><lastmod>2026-08-27T21:56:49.303Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/pins</loc><lastmod>2026-08-27T21:57:36.942Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/1up</loc><lastmod>2026-08-27T21:58:12.128Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/dla-llc</loc><lastmod>2026-08-27T21:57:01.797Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/interlink-software</loc><lastmod>2026-08-27T21:56:21.951Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/ballast-risk</loc><lastmod>2026-08-27T21:56:43.686Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/clearspeed</loc><lastmod>2026-08-27T21:56:50.701Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/hicx</loc><lastmod>2026-08-27T21:58:49.567Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/the-depository-trust-clearing-corporation-dtcc</loc><lastmod>2026-08-27T21:57:03.794Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/resilinc</loc><lastmod>2026-08-27T21:56:31.505Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/vertikal</loc><lastmod>2026-08-27T21:58:07.990Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/callminer</loc><lastmod>2026-08-27T21:56:48.688Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sdg-corporation</loc><lastmod>2026-08-27T21:57:50.403Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/loopio</loc><lastmod>2026-08-27T21:58:17.036Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cldigital</loc><lastmod>2026-08-27T21:58:38.766Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/ethixbase360</loc><lastmod>2026-08-27T21:57:05.152Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/executive-it-forums-inc</loc><lastmod>2026-08-27T21:57:06.300Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/industrial-defender</loc><lastmod>2026-08-27T21:57:23.729Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/riskimmune-by-rcpl</loc><lastmod>2026-08-27T21:57:46.341Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/blue-team-alpha</loc><lastmod>2026-08-27T21:56:45.809Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/rule-ltd</loc><lastmod>2026-08-27T21:57:48.654Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/purplesec</loc><lastmod>2026-08-27T21:57:41.291Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cyberrisk-alliance</loc><lastmod>2026-08-27T21:56:56.741Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/geotab</loc><lastmod>2026-08-27T21:57:10.156Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/processunity</loc><lastmod>2026-08-27T21:58:57.331Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/eftsure</loc><lastmod>2026-08-27T21:58:42.835Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sygnia</loc><lastmod>2026-08-27T21:58:01.731Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/redjack-acquired-by-lansweeper</loc><lastmod>2026-08-27T21:57:43.297Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/omnea</loc><lastmod>2026-08-27T21:57:35.738Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cyberalliance</loc><lastmod>2026-08-27T21:56:54.970Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cybersecurity-risk-foundation</loc><lastmod>2026-08-27T21:56:54.396Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/tribble</loc><lastmod>2026-08-27T21:58:28.218Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/lloyd-s</loc><lastmod>2026-08-27T21:57:28.644Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/gray-analytics</loc><lastmod>2026-08-27T21:57:10.794Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/dvv-solutions-third-party-risk-management</loc><lastmod>2026-08-27T21:57:04.397Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/zcyber-security</loc><lastmod>2026-08-27T21:58:10.746Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/shield-compliance</loc><lastmod>2026-08-27T21:57:55.378Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/aravo-solutions</loc><lastmod>2026-08-27T21:56:39.834Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/green-security</loc><lastmod>2026-08-27T21:58:47.796Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/targhee-security</loc><lastmod>2026-08-27T21:58:26.978Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/trustnet-2</loc><lastmod>2026-08-27T21:58:04.724Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/lookout</loc><lastmod>2026-08-27T21:57:29.226Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/mondas-consulting</loc><lastmod>2026-08-27T21:57:31.467Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/atlas-systems</loc><lastmod>2026-08-27T21:56:40.434Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/kdm-analytics</loc><lastmod>2026-08-27T21:57:27.478Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/strider-technologies</loc><lastmod>2026-08-27T21:57:59.276Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/businessscreen-com</loc><lastmod>2026-08-27T21:58:36.422Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/xapien</loc><lastmod>2026-08-27T21:58:10.120Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/safebase</loc><lastmod>2026-08-27T21:56:13.570Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/rightship</loc><lastmod>2026-08-27T21:57:45.122Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/recorded-future</loc><lastmod>2026-08-27T21:57:42.499Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/nri-securetechnologies-ltd-north-america</loc><lastmod>2026-08-27T21:57:34.521Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/leet-security</loc><lastmod>2026-08-27T21:58:52.591Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/galorath-incorporated</loc><lastmod>2026-08-27T21:57:08.868Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/ridegell-consulting-inc</loc><lastmod>2026-08-27T21:57:44.556Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cyberwall</loc><lastmod>2026-08-27T21:58:15.852Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cypho</loc><lastmod>2026-08-27T21:56:58.563Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/ceeyu</loc><lastmod>2026-08-27T21:58:36.936Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cfgi</loc><lastmod>2026-08-27T21:56:49.978Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/miller-jones-inc</loc><lastmod>2026-08-27T21:57:30.810Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/ncontracts</loc><lastmod>2026-08-27T21:57:32.759Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/eiq-by-lrqa</loc><lastmod>2026-08-27T21:56:29.507Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/forsyte-i-t-solutions</loc><lastmod>2026-08-27T21:58:45.750Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/kearney</loc><lastmod>2026-08-27T21:57:28.094Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/northdoor-plc</loc><lastmod>2026-08-27T21:57:33.903Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/corl-technologies</loc><lastmod>2026-08-27T21:58:40.752Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/valital</loc><lastmod>2026-08-27T21:58:05.854Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/augusta-hitech</loc><lastmod>2026-08-27T21:58:13.936Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/rocketdocs</loc><lastmod>2026-08-27T21:58:23.732Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cybervadis</loc><lastmod>2026-08-27T21:58:41.322Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/kreller-group</loc><lastmod>2026-08-27T21:58:51.978Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/prgx-global-inc</loc><lastmod>2026-08-27T21:57:39.115Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/fusion-risk-management</loc><lastmod>2026-08-27T21:57:08.258Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sifthub</loc><lastmod>2026-08-27T21:58:25.706Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cyble</loc><lastmod>2026-08-27T21:56:57.989Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cyber-buyer</loc><lastmod>2026-08-27T21:56:55.585Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/securityscorecard</loc><lastmod>2026-08-27T21:59:01.793Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/apollo-secure</loc><lastmod>2026-08-27T21:58:12.758Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/prewave</loc><lastmod>2026-08-27T21:57:38.582Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/signalx-ai</loc><lastmod>2026-08-27T21:59:02.377Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/celerity</loc><lastmod>2026-08-27T21:59:07.551Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/restiv-technology</loc><lastmod>2026-08-27T21:58:22.560Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/fireblocks</loc><lastmod>2026-08-27T21:56:09.740Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/trustero</loc><lastmod>2026-08-27T21:58:28.898Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/neotas</loc><lastmod>2026-08-27T21:58:54.320Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/srm-security-risk-management-ltd</loc><lastmod>2026-08-27T21:57:58.744Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sourcegraph</loc><lastmod>2026-08-27T21:56:32.738Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/wequity</loc><lastmod>2026-08-27T21:58:30.677Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/settletop</loc><lastmod>2026-08-27T21:56:32.130Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/supply-wisdom</loc><lastmod>2026-08-27T21:58:00.411Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/avetta</loc><lastmod>2026-08-27T21:56:41.975Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/dun-bradstreet-hong-kong</loc><lastmod>2026-08-27T21:58:42.178Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/evident</loc><lastmod>2026-08-27T21:57:05.787Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/babel-street</loc><lastmod>2026-08-27T21:56:43.041Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/conifers-ai</loc><lastmod>2026-08-27T21:56:17.309Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/risk-ledger</loc><lastmod>2026-08-27T21:57:47.034Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/shadowdragon</loc><lastmod>2026-08-27T21:57:54.832Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/viclarity-us</loc><lastmod>2026-08-27T21:59:06.779Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cadre-information-security</loc><lastmod>2026-08-27T21:56:48.155Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/black-kite</loc><lastmod>2026-08-27T21:58:35.144Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/decision-focus</loc><lastmod>2026-08-27T21:58:41.885Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/interos-ai</loc><lastmod>2026-08-27T21:57:26.083Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/panorays</loc><lastmod>2026-08-27T21:58:56.135Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/datacipher-solutions-pvt-ltd</loc><lastmod>2026-08-27T21:56:59.346Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/clearwater</loc><lastmod>2026-08-27T21:58:39.604Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/wolfia-yc</loc><lastmod>2026-08-27T21:56:14.970Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/forestreet</loc><lastmod>2026-08-27T21:58:45.207Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sepio</loc><lastmod>2026-08-27T21:57:54.267Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/resolver-a-kroll-business</loc><lastmod>2026-08-27T21:57:43.891Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/exiger</loc><lastmod>2026-08-27T21:57:06.840Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/aprovall</loc><lastmod>2026-08-27T21:58:31.844Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/datricks</loc><lastmod>2026-08-27T21:57:00.585Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/procol</loc><lastmod>2026-08-27T21:57:40.456Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/centrl-inc</loc><lastmod>2026-08-27T21:58:37.468Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/riverbed-technology</loc><lastmod>2026-08-27T21:56:12.980Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/myempire-group</loc><lastmod>2026-08-27T21:57:32.186Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/burning-tree</loc><lastmod>2026-08-27T21:56:47.607Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/company-watch</loc><lastmod>2026-08-27T21:56:51.326Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/mitratech-prevalent</loc><lastmod>2026-08-27T21:58:56.776Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/zunesis-is-now-procern-technology-solutions</loc><lastmod>2026-08-27T21:57:39.858Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/vendor-centric</loc><lastmod>2026-08-27T21:59:05.531Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/signetrisk-analytics-inc</loc><lastmod>2026-08-27T21:57:56.211Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/lumu-technologies</loc><lastmod>2026-08-27T21:57:29.898Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/thinklp</loc><lastmod>2026-08-27T21:58:02.354Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/securitypal-ai</loc><lastmod>2026-08-27T21:59:01.253Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/doublecheck-software</loc><lastmod>2026-08-27T21:57:03.578Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/endsight</loc><lastmod>2026-08-27T21:56:19.102Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/independent-information-security-rating-institute</loc><lastmod>2026-08-27T21:57:23.039Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/pivot</loc><lastmod>2026-08-27T21:57:37.492Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/skypher</loc><lastmod>2026-08-27T21:58:26.328Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/senscy</loc><lastmod>2026-08-27T21:57:52.898Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/frdm-ai</loc><lastmod>2026-08-27T21:56:30.650Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/fortifai-inc</loc><lastmod>2026-08-27T21:57:07.056Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/securicentrix</loc><lastmod>2026-08-27T21:56:25.757Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/arphie</loc><lastmod>2026-08-27T21:58:13.370Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/mode</loc><lastmod>2026-08-27T21:56:11.807Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/whistic</loc><lastmod>2026-08-27T21:59:07.323Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/flexis-it</loc><lastmod>2026-08-27T21:56:20.348Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sayari</loc><lastmod>2026-08-27T21:57:49.779Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/vera-formerly-privasee</loc><lastmod>2026-08-27T21:58:18.361Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/highwire</loc><lastmod>2026-08-27T21:57:11.376Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/crif-gulf-dun-bradstreet</loc><lastmod>2026-08-27T21:57:02.416Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/genesis-platform</loc><lastmod>2026-08-27T21:57:09.442Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/securedawn</loc><lastmod>2026-08-27T21:58:24.489Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/riskxchange</loc><lastmod>2026-08-27T21:58:58.604Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/foodlogiq</loc><lastmod>2026-08-27T21:56:34.570Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/solace-global</loc><lastmod>2026-08-27T21:57:58.072Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/veriforce</loc><lastmod>2026-08-27T21:58:07.093Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/autorfp-ai</loc><lastmod>2026-08-27T21:58:14.548Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/oreateai</loc><lastmod>2026-08-27T21:58:17.842Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/barnett-waddingham</loc><lastmod>2026-08-27T21:56:44.373Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/mathcraft-security-technologies-inc</loc><lastmod>2026-08-27T21:56:11.277Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/istari</loc><lastmod>2026-08-27T21:57:26.871Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/point-solutions-security</loc><lastmod>2026-08-27T21:57:38.018Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/bexup</loc><lastmod>2026-08-27T21:58:33.848Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/alcea-france</loc><lastmod>2026-08-27T21:56:26.975Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/qorusdocs</loc><lastmod>2026-08-27T21:58:19.139Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/inspira-enterprise</loc><lastmod>2026-08-27T21:57:24.899Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/rfp-ninja</loc><lastmod>2026-08-27T21:58:23.123Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sage-supply-chain-intelligence</loc><lastmod>2026-08-27T21:56:27.619Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/hoggo</loc><lastmod>2026-08-27T21:57:22.285Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/descartes-systems-group</loc><lastmod>2026-08-27T21:56:28.871Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/repacket</loc><lastmod>2026-08-27T21:58:57.950Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/anvilogic</loc><lastmod>2026-08-27T21:56:15.729Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/thomas-murray</loc><lastmod>2026-08-27T21:58:02.971Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/bruceai</loc><lastmod>2026-08-27T21:58:35.849Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/zip</loc><lastmod>2026-08-27T21:58:11.308Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sky-blackbox</loc><lastmod>2026-08-27T21:57:57.518Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/3vrm</loc><lastmod>2026-08-27T21:56:35.702Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/international-sos</loc><lastmod>2026-08-27T21:57:25.509Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/graphite-connect</loc><lastmod>2026-08-27T21:58:48.682Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sidechannel</loc><lastmod>2026-08-27T21:57:55.911Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/knightscope</loc><lastmod>2026-08-27T21:56:10.479Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/noggin</loc><lastmod>2026-08-27T21:57:33.322Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/isn</loc><lastmod>2026-08-27T21:58:50.164Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/fusebase</loc><lastmod>2026-08-27T21:56:14.368Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/achilles-information-limited</loc><lastmod>2026-08-27T21:56:36.232Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/z2data</loc><lastmod>2026-08-27T21:56:35.169Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/zbrain</loc><lastmod>2026-08-27T21:58:31.217Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cyber-tzar</loc><lastmod>2026-08-27T21:56:28.294Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/toro-solutions</loc><lastmod>2026-08-27T21:58:03.625Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cyflare</loc><lastmod>2026-08-27T21:56:17.915Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/scair</loc><lastmod>2026-08-27T21:56:33.425Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/authbridge</loc><lastmod>2026-08-27T21:58:32.998Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/opus-fund-services</loc><lastmod>2026-08-27T21:56:12.384Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/applied-security-intelligence-sdn-bhd</loc><lastmod>2026-08-27T21:56:39.172Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/vyce</loc><lastmod>2026-08-27T21:58:30.120Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/auditive</loc><lastmod>2026-08-27T21:56:41.204Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cyberse</loc><lastmod>2026-08-27T21:56:57.322Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/oro-labs</loc><lastmod>2026-08-27T21:57:36.389Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/smartcompliance</loc><lastmod>2026-08-27T21:59:02.953Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/corporater</loc><lastmod>2026-08-27T21:56:53.301Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/swiss-grc</loc><lastmod>2026-08-27T21:58:01.213Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/aliado-solutions-llc</loc><lastmod>2026-08-27T21:56:36.899Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/msp-blueshift-pty-ltd</loc><lastmod>2026-08-27T21:56:23.808Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sourceday</loc><lastmod>2026-08-27T21:59:03.562Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/safe-security</loc><lastmod>2026-08-27T21:57:49.237Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/umetech-inc</loc><lastmod>2026-08-27T21:58:05.251Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sedara</loc><lastmod>2026-08-27T21:57:52.310Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/silobreaker</loc><lastmod>2026-08-27T21:57:56.812Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/legitscript</loc><lastmod>2026-08-27T21:58:53.182Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/microhackers</loc><lastmod>2026-08-27T21:57:30.130Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/cyber-protect-llc</loc><lastmod>2026-08-27T21:56:56.170Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/bluevoyant</loc><lastmod>2026-08-27T21:56:47.021Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/convercent</loc><lastmod>2026-08-27T21:58:40.176Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/quest-technology-management</loc><lastmod>2026-08-27T21:57:41.953Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/blue-umbrella-limited</loc><lastmod>2026-08-27T21:56:46.456Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/surgere</loc><lastmod>2026-08-27T21:56:33.978Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/netsurion-acquired-by-lumifi</loc><lastmod>2026-08-27T21:56:24.397Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/hypercomply</loc><lastmod>2026-08-27T21:58:16.502Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/venminder</loc><lastmod>2026-08-27T21:59:06.197Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/elasticito</loc><lastmod>2026-08-27T21:58:43.518Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/rsm-us-llp</loc><lastmod>2026-08-27T21:59:00.566Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/knostic</loc><lastmod>2026-08-27T21:56:22.755Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/evaluationshub</loc><lastmod>2026-08-27T21:58:44.062Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/elastiflow</loc><lastmod>2026-08-27T21:56:18.511Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/viso-trust</loc><lastmod>2026-08-27T21:58:08.551Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/rochdale</loc><lastmod>2026-08-27T21:57:48.006Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/riskify</loc><lastmod>2026-08-27T21:57:45.702Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/trustlayer</loc><lastmod>2026-08-27T21:58:04.196Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/security-delta-hsd</loc><lastmod>2026-08-27T21:57:51.007Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/opraas</loc><lastmod>2026-08-27T21:58:54.896Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sequesto</loc><lastmod>2026-08-27T21:58:25.079Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/fortress-information-security</loc><lastmod>2026-08-27T21:57:07.644Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/tentacle-acquired-by-cytracom</loc><lastmod>2026-08-27T21:58:27.662Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/sentree-systems-corp</loc><lastmod>2026-08-27T21:57:53.495Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/unified-it</loc><lastmod>2026-08-27T21:56:26.352Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/bcs-software</loc><lastmod>2026-08-27T21:58:47.118Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/supplier-shield</loc><lastmod>2026-08-27T21:59:04.182Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/calypsoai</loc><lastmod>2026-08-27T21:56:16.805Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/nuvo</loc><lastmod>2026-08-27T21:57:35.214Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/vendors/responsive</loc><lastmod>2026-08-27T21:58:21.393Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/pages/privacy</loc><lastmod>2026-08-31T16:23:13.935Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/pages/about</loc><lastmod>2026-08-31T16:23:13.935Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/pages/contact</loc><lastmod>2026-08-28T14:15:15.016Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/pages/terms-and-conditions</loc><lastmod>2026-08-28T14:15:15.013Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/pages/cookies</loc><lastmod>2026-08-28T14:15:15.006Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/pages/submit-vendor</loc><lastmod>2026-08-27T21:59:28.187Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/webinars</loc><lastmod>2026-09-15T11:58:18.652Z</lastmod></url>
  <url><loc>https://oversightinstitute.org/webinars/digital-compliance-101-and-the-road-to-2027</loc><lastmod>2026-09-15T11:58:18.652Z</lastmod></url>
</urlset>